Static task
static1
Behavioral task
behavioral1
Sample
3411be45e51fd1de9d5f4b8243acd148_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3411be45e51fd1de9d5f4b8243acd148_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3411be45e51fd1de9d5f4b8243acd148_JaffaCakes118
-
Size
257KB
-
MD5
3411be45e51fd1de9d5f4b8243acd148
-
SHA1
869752ff8e77b7f9bbeca1f47e5df266b95d3e9a
-
SHA256
9a6d4d65d96fbccdef35b33bc35f0c35c6b082fe5701254fce1a97c99cd451df
-
SHA512
2f691719499dca4424d7c2f7adaa0c400d6c03b99af0fcea6b0859009bd8b5b059d75afa8b9030c05d4e9314c4bfabeff6365939dc149a66fe713c131cc125cd
-
SSDEEP
6144:06uOrfrPNnOepRJo1njv1DpIp3fFRuqBvrNlbsoAt:06u6fDdnpRJopjmPFRDFrsoe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3411be45e51fd1de9d5f4b8243acd148_JaffaCakes118
Files
-
3411be45e51fd1de9d5f4b8243acd148_JaffaCakes118.exe windows:4 windows x86 arch:x86
33d023a21f132d77995ad3d356fa02fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
SetEvent
Sleep
GetLastError
GetExitCodeThread
GetTempPathW
WaitForSingleObject
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
IsDebuggerPresent
GetVersionExW
LocalFree
LocalAlloc
MulDiv
BeginUpdateResourceW
GetProcAddress
GetModuleHandleA
user32
GetActiveWindow
GetIconInfo
GetFocus
IsWindow
CopyRect
LoadImageW
InvalidateRect
DestroyIcon
wsprintfW
LoadIconW
EnableWindow
IsIconic
PostMessageW
GetSystemMetrics
MessageBoxW
SendMessageW
LoadMenuIndirectA
CharLowerW
mouse_event
GetMenuInfo
CharPrevW
GetClassInfoW
SetDlgItemInt
GetMenuItemRect
MessageBoxIndirectA
SetDlgItemTextA
DialogBoxIndirectParamA
WinHelpW
GetKeyboardType
IsChild
SetMenu
GetSysColor
CopyIcon
GetDlgItemInt
CreateDialogIndirectParamW
keybd_event
PeekMessageA
GetCapture
RegisterWindowMessageW
gdi32
CreatePatternBrush
DeleteObject
CreateCompatibleDC
CreatePen
CreateFontIndirectW
CreatePalette
CreateSolidBrush
GetStockObject
CreateMetaFileW
GetEnhMetaFileA
SetWinMetaFileBits
AddFontResourceA
GdiGetBatchLimit
UpdateICMRegKeyA
RemoveFontResourceA
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
comctl32
ord17
urlmon
IsValidURL
URLDownloadToFileW
winipsec
GetQMPolicy
DeleteMMPolicy
avifil32
AVIStreamWriteData
AVIFileOpenW
AVIStreamEndStreaming
AVIFileAddRef
AVIFileEndRecord
AVIBuildFilter
AVISaveW
EditStreamSetInfoA
AVIStreamOpenFromFile
AVIClearClipboard
EditStreamCopy
AVIStreamFindSample
Sections
.edata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.icode Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l Size: 107KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.unIsec Size: 112KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ